DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kJHjkFdSa
Static task
static1
Behavioral task
behavioral1
Sample
2ea0bad4d194a406879ddde09bf2d906_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2ea0bad4d194a406879ddde09bf2d906_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2ea0bad4d194a406879ddde09bf2d906_JaffaCakes118
Size
217KB
MD5
2ea0bad4d194a406879ddde09bf2d906
SHA1
6ace9c76a040ae29d72d252fdcb97d7b63d76210
SHA256
49fa4dea1ebaa46168457c4ebdd2f233383e842081b320e217e9f1ffdfa41508
SHA512
67924b4261b2e0ab11c62b73e85f8cbc23cba8e505dd1c4b7f6ae427171f8837bf42f92730b138a45da19ceb514357a164af99cc27a8cc9c9ce9f795583eb0ec
SSDEEP
6144:oxQh2FxQh2FxQh2FxQh2FxQh2FxQh2FxQh2:oxrxrxrxrxrxrx
Checks for missing Authenticode signature.
resource |
---|
2ea0bad4d194a406879ddde09bf2d906_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
kJHjkFdSa
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ